source: libabac/abac_term.c @ 440ba20

/***********************************************************
   abac_term.c

 dterm=data term of rt1
 term is a kind of dterm
***********************************************************/
#include <assert.h>
#include <stdlib.h>
#include <stdio.h>
#include <string.h>
#include <ctype.h>
#include <time.h>

#include "abac_internal.h"
#include "abac_util.h"

static int debug=0;

/* itemtype is
     e_ITEM_MIN=1,
     e_ITEM_MAX=2,
     e_ITEM_TARGET=3,
 [a..b], [a..], [..b], [a],[a,b],[many a]
*/
struct _abac_item_t {
    int itemtype;
    char *val;
};

/* condtype is
     e_COND_ROLE = 1,
     e_COND_OSET = 2,
     e_COND_RANGE = 3
   vartype is one of termtype 
   string will contain either 
       the range literal (static constraint)
      or
       the oset/role prologized string (dynamic constraint)
      it is set if this condition has been pre-processed for codegen
   of_aspect ptr will only be set only if it is a dynamic
       constraint 
   range_list is set only if needed 
*/
struct _abac_condition_t {
    int condtype;
    int vartype;
    char *string; 
    abac_list_t *range_list;
    abac_aspect_t *of_aspect;
};

/* termtype_t/name pair for the data terms
   idtype_t/name/p_name pair for the named principal term
*/
struct _abac_term_t {
    int type;
    char *name;
    int isnamed;
    char *p_name; 
    char *cn; //XXX ?? might not need this at all
    abac_condition_t *constraint;
}; 

/* new, free, add one of terms */
struct _abac_param_list_t {
    abac_list_t *list;
};

/******************************************************************/
char *abac_condtype_string(int i)
{
    if(i>_condname_cnt)
        panic("abac_condtype_string: went out of range on condname");
    return (char *) _condname[i];
}
char *abac_termtype_string(int i)
{
    if(i>_termname_cnt)
        panic("abac_termtype_string: went out of range on termname");
    return (char *) _termname[i];
}

int abac_verify_term_type(char *type) {
    int i;

    if (type == NULL)
        panic("abac_verify_term_type: fail with NULL type\n");

    for (i = 1; i <= _termname_cnt ; i++)
        if(strcmp(type,_termname[i])==0)
            return i;

    panic("abac_verify_term_type: fail with unfounded type\n");
}

int abac_verify_item_type(char *type) {
    int i;

    if (type == NULL)
        panic("abac_verify_item_type: fail with NULL type\n");

    for (i = 1; i <= _itemname_cnt ; i++)
        if(strcmp(type,_itemname[i])==0)
            return i;
    panic("abac_verify_item_type: fail with unfounded type\n");
}

char *abac_range_string(abac_list_t *ptr)
{
    assert(ptr);
    char *tmp=NULL;
    char *min=NULL;
    char *max=NULL;
    char *val=NULL;
    int type;

    abac_item_t *cur;
    assert(ptr);
    abac_list_foreach(ptr, cur,
        type=cur->itemtype;
        switch (type) {
            case e_ITEM_MIN:
                min=abac_xstrdup(cur->val);
                break;
            case e_ITEM_MAX:
                max=abac_xstrdup(cur->val);
                break;
            case e_ITEM_TARGET:
                if(val)
                    asprintf(&val,"%s,%s",val,cur->val);
                else val=abac_xstrdup(cur->val);
                break;
        }
    );
    if(max && min) {
         asprintf(&tmp,"[%s..%s]",min,max);
         free(max);
         free(min);
         return tmp;
    }
    if(max) {
         asprintf(&tmp,"[..%s]",max);
         free(max);
         return tmp;
    }
    if(min) {
         asprintf(&tmp,"[%s..]",min);
         free(min);
         return tmp;
    }
    if(val) {
         asprintf(&tmp,"[%s]",val);
         free(val);
         return tmp;
    }
    return NULL;
}
/******************************************************************/
abac_item_t *abac_item_new(char *itype, char *val)
{
     abac_item_t *nptr=
             (abac_item_t *)abac_xmalloc(sizeof(abac_item_t));
     nptr->itemtype=abac_verify_item_type(itype);
     nptr->val=abac_xstrdup(val);
     return nptr;
}

void abac_item_free(abac_item_t *ptr)
{
     assert(ptr);
     assert(ptr->val);
     free(ptr->val);
     free(ptr);
}

abac_item_t *abac_item_dup(abac_item_t *ptr)
{
     abac_item_t *nptr=
             (abac_item_t *)abac_xmalloc(sizeof(abac_item_t));
     nptr->itemtype=ptr->itemtype;
     nptr->val=abac_xstrdup(ptr->val);
     return nptr;
}

int abac_item_type(abac_item_t *ptr)
{
    return ptr->itemtype;
}

char *abac_item_val(abac_item_t *ptr)
{
    return ptr->val;
}

/******************************************************************/
static abac_condition_t *_abac_condition_new(int type, int vtype,
char* condstr,void *cptr)
{
     if(debug) {
         printf("   abac_condition_new: \n");
         printf("     condtype is %d(%s)\n", type, abac_condtype_string(type));
         printf("     vtype is %d(%s)\n", vtype, abac_termtype_string(type));
         printf("     condstr is (%s)\n", condstr);
         if(cptr) printf("     yes on cptr\n");
             else printf("     no on cptr\n");
     }
     abac_condition_t *ptr=
             (abac_condition_t *)abac_xmalloc(sizeof(abac_condition_t));
     ptr->condtype=type;
     ptr->vartype=vtype;
     ptr->string=abac_xstrdup(condstr);
     ptr->of_aspect=NULL;
     ptr->range_list=NULL;
     if(type==e_COND_RANGE) {
          ptr->range_list=(abac_list_t *)cptr;
          } else {
             if(cptr) ptr->of_aspect=abac_aspect_dup((abac_aspect_t *)cptr);
     }
     return ptr;
}

void abac_condition_free(abac_condition_t *ptr)
{
     switch(ptr->condtype) {
        case e_COND_OSET:
        case e_COND_ROLE:
            abac_aspect_free(ptr->of_aspect);
            break;
        case e_COND_RANGE:
            /* do nothing */
            break;
     }
     if(ptr->string) free(ptr->string);
     if(ptr->range_list != NULL) {
         abac_item_t *cur;
         abac_list_foreach(ptr->range_list, cur,
           abac_item_free(cur);
         );
         abac_list_free(ptr->range_list);
     }
     free(ptr);
}

abac_aspect_t *abac_condition_of_aspect(abac_condition_t *ptr)
{
   return ptr->of_aspect;
}

int abac_condition_is_range(abac_condition_t *ptr)
{
   if(ptr->condtype==e_COND_RANGE)
      return 1;
      else return 0;
}

/* called from backend, intended as stub for range constraint */
abac_condition_t *abac_condition_create(char *vtype)
{
     abac_condition_t *nptr=
             (abac_condition_t *)abac_xmalloc(sizeof(abac_condition_t));
     nptr->condtype=e_COND_RANGE;
     nptr->vartype=abac_verify_term_type(vtype);
     nptr->string=NULL;
     nptr->range_list=NULL;
     nptr->of_aspect=NULL;
     return nptr;
}

abac_condition_t *abac_condition_create_from_aspect(abac_aspect_t *ptr)
{
     assert(ptr);
     abac_condition_t *nptr=
             (abac_condition_t *)abac_xmalloc(sizeof(abac_condition_t));
     if(abac_aspect_is_role(ptr))
         nptr->condtype=e_COND_ROLE;
         else nptr->condtype=e_COND_OSET;
     nptr->vartype=e_TERM_PRINCIPAL;
     nptr->string=NULL;
     nptr->range_list=NULL;
     nptr->of_aspect=abac_aspect_dup(ptr);
     return nptr;
}

/* made a copy */
abac_condition_t *abac_condition_dup(abac_condition_t *ptr)
{
     abac_condition_t *nptr=
             (abac_condition_t *)abac_xmalloc(sizeof(abac_condition_t));
     nptr->condtype=ptr->condtype;
     nptr->vartype=ptr->vartype;
     if(ptr->string)
         nptr->string=abac_xstrdup(ptr->string);
         else nptr->string=NULL;
     if(ptr->of_aspect)
         nptr->of_aspect=abac_aspect_dup(ptr->of_aspect);
         else nptr->of_aspect=NULL;

     if(ptr->range_list!=NULL) {
         nptr->range_list=abac_list_new();
         abac_item_t *cur;
         abac_item_t *nitem;
         abac_list_foreach(ptr->range_list, cur,
           nitem=abac_item_dup(cur);
           abac_list_add(nptr->range_list,nitem); 
         );
         } else {
             nptr->range_list=NULL;
     }
     return nptr;
}

int abac_condition_vartype(abac_condition_t *ptr)
{
    return ptr->vartype;
}

abac_list_t *abac_condition_range_list(abac_condition_t *ptr)
{
     assert(ptr);
     return ptr->range_list;
}


int abac_condition_add_range_item(abac_condition_t *ptr, char *vtype, char* itype, char* val)
{
    if(ptr->vartype != abac_verify_term_type(vtype))
       panic("abac_condition_add_range_item: attempt to add range item that does not match with the constraint's type\n");
    abac_item_t *nitem=abac_item_new(itype,val);
    if(ptr->range_list==NULL)
       ptr->range_list=abac_list_new();
    abac_list_add(ptr->range_list,nitem);
}

char *abac_condition_string(abac_condition_t *ptr)
{
     char *string=NULL;
     switch(ptr->condtype) {
        case e_COND_OSET:
        case e_COND_ROLE:
            string=abac_aspect_string_with_condition(ptr->of_aspect);
            return string;
            break;
        case e_COND_RANGE:
            if(ptr->string != NULL) {
                string=abac_xstrdup(ptr->string);
                return string;
            }
            if(ptr->range_list != NULL) {
                string=abac_range_string(ptr->range_list);
                return string;
            }
            break;
     }
     return string;
}

char *abac_condition_typed_string(abac_condition_t *ptr)
{
     char *string=NULL;
     switch(ptr->condtype) {
        case e_COND_OSET:
        case e_COND_ROLE:
            string=abac_aspect_typed_string_with_condition(ptr->of_aspect);
            return string;
            break;
        case e_COND_RANGE:
            if(ptr->string != NULL) {
                string=abac_xstrdup(ptr->string);
                return string;
            }
            if(ptr->range_list != NULL) {
                string=abac_range_string(ptr->range_list);
                return string;
            }
            break;
     }
     return string;
}

int abac_condition_set_range_string(abac_condition_t *ptr)
{
   char *string= abac_range_string(ptr->range_list);
   ptr->string=string;
   return 1;
}

int abac_condition_set_aspect_string(abac_condition_t *ptr, char *str)
{
   ptr->string=abac_xstrdup(str);
   return 1;
}

int abac_condition_set_aspect_ptr(abac_condition_t *ptr, abac_aspect_t *aptr)
{
   ptr->of_aspect=abac_aspect_dup(aptr);
   return 1;
}

void abac_condition_dump(abac_condition_t *ptr, char *offset)
{
   printf("...constraint...\n");
   printf("%s condtype: %d(%s)\n",
                offset, ptr->condtype,abac_condtype_string(ptr->condtype));
   printf("%s vartype: %d(%s)\n",
                offset, ptr->vartype,abac_termtype_string(ptr->vartype));
   if(ptr->string)
       printf("%s string: %s\n", offset, ptr->string);
       else printf("%s string: --\n", offset);
   if(ptr->range_list)
       printf("%s range_list: %s\n",
                     offset, abac_range_string(ptr->range_list));
       else printf("%s range_list: --\n", offset);
   if(ptr->of_aspect) {
       char *tmp=NULL;
       asprintf(&tmp,"  %s",offset);
       abac_aspect_dump(ptr->of_aspect,tmp);
       free(tmp);
       } else printf("%s of_aspect: --\n", offset);
   printf("................\n");
}

/******************************************************************/
int abac_term_isvar(abac_term_t *term)
{
    if(isupper(term->name[0])) return 1;
       else return 0;
} 

int abac_term_isnamed(abac_term_t *term)
{
    if(term->isnamed) return 1;
       else return 0;
}

char *abac_term_name(abac_term_t *term)
{
    if(ABAC_IN_PROLOG && term->p_name) {
        return term->p_name;
    }
    return term->name;
}

char *abac_term_cn(abac_term_t *term)
{
    return term->cn;
}

abac_condition_t *abac_term_constraint(abac_term_t *term)
{
    return term->constraint;
}

char *abac_term_type_name(abac_term_t *term)
{
    if(term->isnamed)
        return abac_idtype_string(term->type);
    return abac_termtype_string(term->type);
}

int abac_term_type(abac_term_t *term)
{
    return term->type;
}

static bool _abac_termtype_is_time_type(int i)
{
    if (i == e_TERM_TIME) 
       return 1;
    return 0;
}

bool abac_term_is_time_type(abac_term_t *term)
{
    return _abac_termtype_is_time_type(term->type);
}

static bool _abac_termtype_is_string_type(int i)
{
    if (i == e_TERM_STRING) 
       return 1;
    return 0;
}

bool abac_term_is_string_type(abac_term_t *term)
{
    return _abac_termtype_is_string_type(term->type);
}

static bool _abac_termtype_is_integer_type(int i)
{
    if (i == e_TERM_INTEGER) 
       return 1;
    return 0;
}

bool abac_term_is_integer_type(abac_term_t *term)
{
    return _abac_termtype_is_integer_type(term->type);
}

static bool _abac_termtype_is_urn_type(int i)
{
    if (i == e_TERM_URN) 
       return 1;
    return 0;
}

bool abac_term_is_urn_type(abac_term_t *term)
{
    return _abac_termtype_is_urn_type(term->type);
}

bool abac_term_is_alpha(abac_term_t *term)
{
    if(term->type == e_TERM_URN ||
          term->type == e_TERM_STRING ||
              term->type == e_TERM_BOOLEAN)
        return 1;
    return 0;
}

bool abac_term_is_numeric(abac_term_t *term)
{
    if(term->type == e_TERM_INTEGER ||
          term->type == e_TERM_FLOAT)
        return 1;
    return 0;
}

bool abac_term_is_time(abac_term_t *term)
{
    if(term->type == e_TERM_TIME)
        return 1;
    return 0;
}

char *abac_term_to_time(char *string)
{
    struct tm tm1;
    char buf[255];

    strptime(string, "%Y%m%dT%H%M%S", &tm1);
    strftime(buf, sizeof(buf), "time(%Y,%m,%d,%H,%M,%S)", &tm1);
    return strdup(buf);
}

/* called from yy, cptr is either abac_aspect_t or abac_list_t */
abac_term_t *abac_term_new(int type, char *name, int isrange, char *cond, void *cptr)
{
     if(debug) {
         printf("abac_term_new: \n");
         printf("  type is %d(%s)\n", type, abac_termtype_string(type));
         printf("  name is (%s)\n", name);
         if(cond)
             printf("  cond is %s\n", cond);
             else printf("  no cond \n");
         printf("  isrange is %d\n", isrange);
         if(cptr) {
             if(isrange) printf("  cptr is (%s)\n", 
                                    abac_range_string((abac_list_t *)cptr));
                else
                   printf("  cptr is (%s)\n", 
                          abac_aspect_string_with_condition((abac_aspect_t *)cptr));
         }    else printf("  there is no cptr\n");
     }
     abac_condition_t *constraint=NULL;
     if (cptr) {
         if(isrange) {
           constraint=_abac_condition_new(e_COND_RANGE,type,cond,cptr);
           } else {
             if(type==e_TERM_PRINCIPAL)
               constraint=_abac_condition_new(e_COND_ROLE,type,cond,cptr);
               else
                 constraint=_abac_condition_new(e_COND_OSET,type,cond,cptr);
         }
     }
     abac_term_t *ptr=abac_xmalloc(sizeof(abac_term_t));
     ptr->isnamed=0;
     ptr->type=type;
     ptr->p_name=NULL;
     /* reformat the term name if it is a time type */
     if((!constraint) && _abac_termtype_is_time_type(type) && isdigit(name[0])) {
         char *tmp=abac_term_to_time(name);
         ptr->name=tmp;
         } else {
             ptr->name=abac_xstrdup(name);
     }
     ptr->constraint=constraint;
     ptr->cn=NULL;
     return ptr;
}

abac_term_t *abac_term_create(int type, char *name, abac_condition_t *cptr)
{
     if(debug) {
         printf("abac_term_create: \n");
         printf("  type is %d(%s)\n", type, abac_termtype_string(type));
         printf("  name is (%s)\n", name);
         if(cptr)
             printf("  cptr is (%s)\n", abac_condition_typed_string(cptr));
             else printf("  there is no cptr\n");
     }

     abac_term_t *ptr=abac_xmalloc(sizeof(abac_term_t));
     ptr->isnamed=0;
     ptr->type=type;
     ptr->p_name=NULL;
     /* reformat the term name if it is a time type */
     if((!cptr) && _abac_termtype_is_time_type(type) && isdigit(name[0])) {
         char *tmp=abac_term_to_time(name);
         ptr->name=tmp;
         } else {
             ptr->name=abac_xstrdup(name);
     }
     ptr->constraint=(cptr==NULL)?NULL:abac_condition_dup(cptr);
     ptr->cn=NULL;
     return ptr;
}

/* called from yy, named principal type */
abac_term_t *abac_term_named_new(int idtype, char *name)
{
     if(debug) {
         printf("abac_term_named_new: \n");
         printf("  type is %d(%s)\n", idtype, abac_idtype_string(idtype));
         printf("  name is (%s)\n", name);
     }
     abac_term_t *ptr=abac_xmalloc(sizeof(abac_term_t));
     ptr->isnamed=1;
     ptr->type=idtype;
     ptr->name=abac_xstrdup(name);
     ptr->p_name=NULL;
     /* if ABAC_CN, no need to attach p */
     if(!USE("ABAC_CN"))
         asprintf(&ptr->p_name,"p%s",name);
     ptr->constraint=NULL;
     ptr->cn=NULL;
     return ptr;
}

abac_term_t *abac_term_named_create(int idtype, char *name)
{
     if(debug) {
         printf("abac_term_named_create: \n");
         printf("  type is %d(%s)\n", idtype, abac_idtype_string(idtype));
         printf("  name is (%s)\n", name);
     }

     abac_term_t *ptr=abac_xmalloc(sizeof(abac_term_t));
     ptr->isnamed=1;
     ptr->type=idtype;
     ptr->name=abac_xstrdup(name);
     ptr->p_name=NULL;
     /* if ABAC_CN, no need to attach p */
     if(!USE("ABAC_CN"))
         asprintf(&ptr->p_name,"p%s",name);
     ptr->constraint=NULL;
     ptr->cn=NULL;
     return ptr;
}

abac_term_t *abac_term_dup(abac_term_t *ptr)
{
     assert(ptr);
     abac_term_t *nptr=abac_xmalloc(sizeof(abac_term_t));
     nptr->isnamed=ptr->isnamed;
     nptr->type=ptr->type;
     nptr->name=abac_xstrdup(ptr->name);
     nptr->p_name=(ptr->p_name==NULL)?NULL:abac_xstrdup(ptr->p_name);
     if(ptr->constraint!=NULL)
        nptr->constraint=abac_condition_dup(ptr->constraint);
        else nptr->constraint=NULL;
     nptr->cn=(ptr->cn)==NULL?NULL:abac_xstrdup(ptr->cn);
        nptr->cn=abac_xstrdup(ptr->cn);
     return nptr;
}

void abac_term_free(abac_term_t *ptr)
{
    if(ptr->constraint) {
         abac_condition_free(ptr->constraint);
    }
    free(ptr->name);
    if(ptr->p_name) free(ptr->p_name);
    if(ptr->cn) free(ptr->cn);
    free(ptr);
}

abac_term_t *abac_term_add_constraint(abac_term_t *ptr, abac_condition_t *cond)
{
    /* make sure the types are matching */
    if(abac_condition_vartype(cond) != abac_term_type(ptr)) {
        panic("abac_term_add_constraint: mismatched constraint type with the dataterm\n");
        return NULL;
    }
    
    if(ptr->constraint) {
        abac_condition_free(ptr->constraint);
    }
    ptr->constraint = abac_condition_dup(cond);
    return ptr;
}

/* name or name:cond */
static char *abac_term_string_with_condition(abac_term_t *ptr)
{
    char *tmp=NULL;
    char *cond=NULL;
    char *name=abac_term_name(ptr);
    if(ptr->constraint) {
       cond=abac_condition_string(ptr->constraint);
    }
    if(cond) {
       asprintf(&tmp,"%s:%s", name, cond);
       free(cond);
    } else tmp=abac_xstrdup(name);
    return tmp;
}

/* [type:name] or [typed:name:cond] */
static char *abac_term_typed_string_with_condition(abac_term_t *ptr)
{
    char *tmp=NULL;
    char *cond=NULL;
    char *name=abac_term_name(ptr);
    char *type=abac_term_type_name(ptr);
    if(ptr->constraint) {
       cond=abac_condition_typed_string(ptr->constraint);
    }
    if(cond) {
       asprintf(&tmp,"[%s:%s:%s]", type, name, cond);
       free(cond);
    } else
           asprintf(&tmp,"[%s:%s]", type, name);
    if(debug) printf("abac_term_typed_string_with_condition: (%s)\n",tmp);
    return tmp;
}

char *abac_term_string(abac_term_t *ptr)
{
    return abac_xstrdup(abac_term_name(ptr));
}

char *abac_term_typed_string(abac_term_t *ptr)
{
    return abac_term_typed_string_with_condition(ptr);
}

/********************************************************************/
abac_list_t *abac_param_list(abac_param_list_t *ptr)
{
    assert(ptr);
    return ptr->list;
}

void abac_param_dump(abac_param_list_t *ptr, char *offset)
{
    printf("===params===\n");
    abac_term_t  *cur;
    abac_list_foreach(ptr->list, cur,
           abac_term_dump(cur, offset);
    );
    printf("============\n");
}

abac_param_list_t *abac_param_list_new(abac_term_t *term)
{
    abac_param_list_t *ptr=abac_xmalloc(sizeof(abac_param_list_t));
    ptr->list=abac_list_new();
    abac_list_add(ptr->list, abac_term_dup(term));
    return ptr;
}

abac_param_list_t *abac_param_list_free(abac_param_list_t *ptr)
{
    abac_list_t *list=ptr->list;
    abac_term_t  *cur;
    abac_list_foreach(list, cur,
           abac_term_free(cur);
    );
    abac_list_free(list);
    free(ptr);
}

abac_param_list_t *abac_param_list_add_term(abac_param_list_t *ptr, abac_term_t *term)
{
    abac_list_t *list=ptr->list;
    abac_list_add(list, abac_term_dup(term));
    return ptr;
}


/* term1:cond1,term2:cond2 */
char* abac_param_list_string_with_condition(abac_param_list_t *ptr)
{
    if(ptr->list == NULL)
        return "";

    abac_term_t  *cur;
    char *tmp=NULL, *final=NULL;
    abac_list_foreach(ptr->list, cur,
           char *s=abac_term_string_with_condition(cur);
           if(final==NULL) {
               final=abac_xstrdup(s);
               } else {
                  tmp=final;
                  final=NULL;
                  asprintf(&final,"%s,%s",tmp,s);
                  free(tmp);
           }
           free(s);
    );
    return final;
}

/* [type:term1:cond1],[type:term2:cond2] */
char* abac_param_list_typed_string_with_condition(abac_param_list_t *ptr)
{
    if(ptr->list == NULL)
        return "";

    abac_term_t  *cur;
    char *tmp=NULL, *final=NULL;
    abac_list_foreach(ptr->list, cur,
           char *s=abac_term_typed_string_with_condition(cur);
           if(final==NULL) {
               final=abac_xstrdup(s);
               } else {
                  tmp=final;
                  final=NULL;
                  asprintf(&final,"%s,%s",tmp,s);
                  if(debug) printf("typed param so far, %s\n", final);
                  free(tmp);
           }
           free(s);
    );
    if(debug) printf("typed param so far, %s\n", final);
    return final;
}

/* term1,term2 */
char* abac_param_list_string(abac_param_list_t *ptr)
{
    abac_list_t *list=ptr->list;
    if(list == NULL)
        return "";
    abac_term_t  *cur;
    char *final=NULL;
    char *tmp=NULL;

    /* collect up all the string */
    abac_list_foreach(list, cur,
           char *s=abac_term_string(cur);
           if(final==NULL) {
               final=abac_xstrdup(s);
               } else {
                  tmp=final;
                  final=NULL;
                  asprintf(&final,"%s,%s",tmp,s);
                  if(debug) printf("param so far, %s\n", final);
                  free(tmp);
           }
           free(s);
    );
    if(debug) printf("param so far, %s\n", final);
    return final;
}

/* make a stack of it for the abac.hh */
abac_term_t **abac_param_list_vectorize(abac_param_list_t *ptr)
{
    abac_term_t **terms=NULL;
    abac_list_t *list=ptr->list;
    int cnt=0;
    if(list != NULL)
        cnt=abac_list_size(list);
    
    // make the array (leave space to NULL terminate it)
    //      n.b., even if the list is empty, we still return an array that
    //            only contains the NULL terminator
    terms = abac_xmalloc(sizeof(abac_term_t *) * (cnt + 1));

    abac_term_t  *cur;
    int i = 0;
    if(i<cnt) {
        abac_list_foreach(list, cur,
            terms[i++] = abac_term_dup(cur);
        );
    }
    terms[i] = NULL;
    return terms;
}


void abac_terms_free(abac_term_t **terms)
{
    /* always null terminating */
    assert(terms);
    int i; 
    for (i = 0; terms[i] != NULL; ++i) {
        abac_term_free(terms[i]);
    }
    free(terms);
}

void abac_term_dump(abac_term_t *ptr, char *offset)
{
    printf("--- term---\n");
    printf("%s type : %s\n",offset, abac_term_type_name(ptr));
    printf("%s name : %s\n",offset, abac_term_name(ptr));
    printf("%s isnamed: %d\n",offset,ptr->isnamed);
    if(ptr->p_name)
        printf("%s p_name: %s\n",offset,ptr->p_name);
        else printf("%s p_name: --\n",offset);
    if(ptr->cn)
        printf("%s cn: %s\n",offset,ptr->cn);
        else printf("%s cn: --\n",offset);
    if(ptr->constraint) {
        char *tmp=NULL;
        asprintf(&tmp,"  %s", offset);
        abac_condition_dump(ptr->constraint,offset);
        free(tmp);
        } else printf("%s constraint: --\n",offset);
    printf("-----------\n");
}